Search results

Based on your spam mail, there is no "Reddit". From: Reddit <dean@sdncommunications.com>

Based on the spam mail, the from format is Reddit <dean@sdncommunications.com>. Try this regex ^(Reddit|Linkedin) <.*>.*$

Pls provide raw format of the spam mail for checking.

Try What object match field ^.*".*".*<.*>.*$ or ^.*"Reddit|LinkedIn".*<.*>.*$

You want rule filter by Subject or From email address?

Opps...my bad o_O

Oh..Sorry my bad. Is the antivirus on my smtp server that have remove the eicar file before send out to PMG. That why PMG did not detect any. o_O

Follow below link to enable clamav rar support. https://forum.proxmox.com/threads/pmg-clamav-rar-support.104387/

By default PMG 7 use clamav as it default antivirus scanner and also based on Debian as it base OS. Due to RAR format is a proprietary file-format and Debian have policy to move all non-free package to the non-free repository. Further more, PMG do not enable the non-free repo by default so it...

@tom Yes, it is missing libclamunrar. But why PMG did not include clamav rar support in the first place if PMG come with clamav as the default antivirus? It is mentioned in the reference documentation - https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmg_package_repositories (3.5.6 Other...

I want to test outgoing rule with virus filter and it seem not working. Have anyone using it? The rule is using lowest outgoing priority and the same rule work with others what object like content-type and match field.

Btw, I notice latest clamav signature should detect the virus without 3rd party signature.

I cannot download the virus for testing https://easyupload.io/m/r0xayp

Pls provide log file of how PMG process the spam mail.

Set 0 score for RCVD_IN_DNSWL_HI under CUSTOM SCORES.

If not mistaken, the AV page will not show clamav custom DB status.

try match field from=^.*<.*>.*<.*>.*$ or from=^.*UTF-8.*<.*>.*$

Maybe have a look at nftables snat https://www.linuxbabe.com/mail-server/postfix-multiple-instances-ip-rotation-on-a-single-vps

Working with the latest pmg-log-tracker. Will monitor on 1st-March again...

Have you check with your hosting provider regarding the blacklist? Another option is using smarthost but make sure the public IP is clean too.